本文以视频教程 https://www.bilibili.com/video/BV1og4y1q7M4 为基础,忽略部分基础原理,保留操作过程代码和结果截图,旨在对docker镜像和容器基本命令提供可快速上手并有可操作性的练习指南。
Docker的常用命令
帮助命令
代码语言:txt复制docker version # 显示docker的版本信息
docker info # 显示docker的系统信息,包括镜像和容器的数量
docker 命令 --help(man docker 命令) # 帮助命令
帮助文档的地址:https://docs.docker.com/engine/reference/commandline/docker/
镜像命令
docker images 查看所有本地的主机上的镜像
代码语言:txt复制[root@VM_0_13_centos ~]# docker images
REPOSITORY TAG IMAGE ID CREATED SIZE
hello-world latest bf756fb1ae65 8 months ago 13.3kB
# 解释
REPOSITORY 镜像的仓库源(镜像名)
TAG 镜像的标签
IMAGE ID 镜像的id
CREATED 镜像的创建时间
SIZE 镜像的大小
# 可选项
-a, --all # 列出所有镜像
-q, --quiet # 只显示镜像的id
docker search 搜索镜像
代码语言:txt复制[root@VM_0_13_centos ~]# docker search mysql
NAME DESCRIPTION STARS OFFICIAL AUTOMATED
mysql MySQL is a widely used, open-source relation… 9942 [OK]
mariadb MariaDB is a community-developed fork of MyS… 3636 [OK]
# 可选项,通过收藏来过滤
--filter=STARS=3000 # 搜索出来的镜像就是STARS大于3000的
docker pull 下载镜像
代码语言:txt复制# 下载镜像 docker pull 镜像名[:tag]
[root@VM_0_13_centos ~]# docker pull mysql
Using default tag: latest # 如果不写tag,默认就是 latest
latest: Pulling from library/mysql
bf5952930446: Pull complete # 分层下载,docker images的核心 联合文件系统
8254623a9871: Pull complete
938e3e06dac4: Pull complete
ea28ebf28884: Pull complete
f3cef38785c2: Pull complete
894f9792565a: Pull complete
1d8a57523420: Pull complete
6c676912929f: Pull complete
3cdd8ff735c9: Pull complete
4c70cbe51682: Pull complete
e21cf0cb4dc3: Pull complete
28c36cd3abcc: Pull complete
Digest: sha256:6ded54eb1e5d048d8310321ba7b92587e9eadc83b519165b70bbe47e4046e76a # 签名
Status: Downloaded newer image for mysql:latest
docker.io/library/mysql:latest # 真实地址
# 等价于它
docker pull mysql
docker pull docker.io/library/mysql:latest
# 指定版本下载
[root@VM_0_13_centos ~]# docker pull mysql:5.7
5.7: Pulling from library/mysql
bf5952930446: Already exists
8254623a9871: Already exists
938e3e06dac4: Already exists
ea28ebf28884: Already exists
f3cef38785c2: Already exists
894f9792565a: Already exists
1d8a57523420: Already exists
5f09bf1d31c1: Pull complete
1591b28581e8: Pull complete
96ef942f7603: Pull complete
2e009731422e: Pull complete
Digest: sha256:1a83136153b238b659b0887ceb4e08275473af1eab2e67de4c22b37c5f4130cd
Status: Downloaded newer image for mysql:5.7
docker.io/library/mysql:5.7
docker rmi 删除镜像
代码语言:txt复制[root@VM_0_13_centos ssh]# docker rmi -f 镜像id/镜像名称 # 删除指定镜像
[root@VM_0_13_centos ssh]# docker rmi -f 镜像id/镜像名称 镜像id/镜像名称 镜像id/镜像名称 # 删除多个镜像
[root@VM_0_13_centos ssh]# docker rmi -f $(docker iamges -aq) # 删除全部的镜像
[root@VM_0_13_centos ssh]# docker images -a -q|xargs docker rmi # 删除所有的镜像
容器命令
说明:我们有了镜像才可以创建容器,linux,下载一个centos镜像才测试学习(套娃?hhhhh)
代码语言:txt复制docker pull centos
新建容器并启动
代码语言:txt复制docker run [可选参数] image
# 参数说明
--name="Name" 容器名字 tomcat01 tomcat02,用来区分容器
-d 后台方式启动
-it 使用交互方式运行,进入容器查看内容
-p 指定容器的端口 -p 8080:8080
-p ip:主机端口:容器端口
-p 主机端口:容器端口 (常用)
-p 容器端口
容器端口
-P 随机指定端口
# 测试,启动并进入容器 (套娃?hhhhh)
[root@VM_0_13_centos /]# docker run -it centos /bin/bash
[root@5e7d1cb8ec28 /]# ls # 查看容器内的centos,基础版本,很多命令都是不完善的!
bin dev etc home lib lib64 lost found media mnt opt proc root run sbin srv sys tmp usr var
# 从容器中退回主机
[root@4d6cf194f179 /]# exit
exit
[root@VM_0_13_centos /]# ls
bin dev lib media proc sbin tmp
boot etc lib64 mnt root srv usr
data home lost found opt run sys var
[root@VM_0_13_centos /]#
列出所有的运行的容器
代码语言:txt复制# docker ps 命令
# 列出当前正在运行的容器
-a # 列出当前正在运行的容器 带出历史运行过的容器
-n=? # 显示最近创建的n个容器
-q # 只显示容器的编号
[root@VM_0_13_centos /]# docker ps
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
[root@VM_0_13_centos /]# docker ps -a
CONTAINER ID IMAGE COMMAND CREATED STATUS
PORTS NAMES
4d6cf194f179 centos "/bin/bash" 2 minutes ago Exited (0) About a minute ago priceless_napier
5e7d1cb8ec28 centos "/bin/bash" 6 minutes ago Exited (127) 2 minutes ago busy_sinoussi
05ce294f9ba1 hello-world "/hello" 2 hours ago Exited (0) 2 hours ago nostalgic_poitras
4ac5474112ad hello-world "/hello" 2 hours ago Exited (0) 2 hours ago wonderful_tesla
6256c499dc85 hello-world "/hello" 2 hours ago Exited (0) 2 hours ago intelligent_volhard
退出容器
代码语言:txt复制exit # 直接容器停止并退出
Ctrl P Q # 容器不停止退出
删除容器
代码语言:txt复制docker rm 容器id # 删除指定的容器,不能删除正在运行的容器
docker rm -f $(docker ps -aq) # 删除所有的容器
docker ps -a -q|xargs docker rm # 删除所有的容器
启动和停止容器
代码语言:txt复制docker start 容器id # 启动容器
docker restart 容器id # 重启容器
docker stop 容器id # 停止当前正在运行的容器
docker kill 容器id # 强制停止当前正在运行的容器
常用的其他命令(日志、进程、元数据)
后台启动容器
代码语言:txt复制# 命令 docker run -d 镜像名!
[root@VM_0_13_centos /]# docker run -d centos
# 问题docker ps,发现 centos 停止了
# 常见的坑,docker 容器使用后台进行,就必须要有一个前台进程,docker发现没有应用,就会自动停止
# nginx,容器启动后,发现自己没有提供服务,就会立刻停止,就是没有程序了
查看日志
代码语言:txt复制docker logs -f -t --tail 容器,没有日志
# 自己编写一段shell脚本
[root@VM_0_13_centos /]# docker run -d centos /bin/sh -c "while true;do echo yushuo;sleep 1;done"
CONTAINER ID IMAGE
d209eedceec2 centos
# 显示日志
-tf # 显示日志 -t 显示时间戳 -f 显示接下来的log信息
--tail n # 要显示的日志条数
[root@VM_0_13_centos /]# docker logs -tf --tail 10 d209eedceec2
2020-09-08T13:37:52.434663412Z yushuo
2020-09-08T13:37:53.436735983Z yushuo
查看容器中进程信息
(类似linux中:ps命令)
代码语言:txt复制# 命令
docker top 容器id
[root@VM_0_13_centos /]# docker top d209eedceec2
UID PID PPID C STIME TTY
root 11564 11548 0 20:59 pts/0
root 31362 11564 0 22:19 pts/0
查看镜像的元数据
代码语言:txt复制# 命令
docker inspect 容器id
#测试
[root@VM_0_13_centos /]# docker inspect d209eedceec2
[
{
"Id": "d209eedceec2367f2df149c2f0a8161347e60298727a70e3aea3fb6b1ea3f3ab",
"Created": "2020-09-08T12:59:04.0332043Z",
"Path": "/bin/sh",
"Args": [
"-c",
"while true;do echo yushuo;sleep 1;done"
],
"State": {
"Status": "running",
"Running": true,
"Paused": false,
"Restarting": false,
"OOMKilled": false,
"Dead": false,
"Pid": 11564,
"ExitCode": 0,
"Error": "",
"StartedAt": "2020-09-08T12:59:04.358426426Z",
"FinishedAt": "0001-01-01T00:00:00Z"
},
"Image": "sha256:0d120b6ccaa8c5e149176798b3501d4dd1885f961922497cd0abef155c869566",
"ResolvConfPath": "/var/lib/docker/containers/d209eedceec2367f2df149c2f0a8161347e60298727a70e3aea3fb6b1ea3f3ab/resolv.conf",
"HostnamePath": "/var/lib/docker/containers/d209eedceec2367f2df149c2f0a8161347e60298727a70e3aea3fb6b1ea3f3ab/hostname",
"HostsPath": "/var/lib/docker/containers/d209eedceec2367f2df149c2f0a8161347e60298727a70e3aea3fb6b1ea3f3ab/hosts",
"LogPath": "/var/lib/docker/containers/d209eedceec2367f2df149c2f0a8161347e60298727a70e3aea3fb6b1ea3f3ab/d209eedceec2367f2df149c2f0a8161347e60298727a70e3aea3fb6b1ea3f3ab-json.log",
"Name": "/peaceful_shamir",
"RestartCount": 0,
"Driver": "overlay2",
"Platform": "linux",
"MountLabel": "",
"ProcessLabel": "",
"AppArmorProfile": "",
"ExecIDs": null,
"HostConfig": {
"Binds": null,
"ContainerIDFile": "",
"LogConfig": {
"Type": "json-file",
"Config": {}
},
"NetworkMode": "default",
"PortBindings": {},
"RestartPolicy": {
"Name": "no",
"MaximumRetryCount": 0
},
"AutoRemove": false,
"VolumeDriver": "",
"VolumesFrom": null,
"CapAdd": null,
"CapDrop": null,
"Capabilities": null,
"Dns": [],
"DnsOptions": [],
"DnsSearch": [],
"ExtraHosts": null,
"GroupAdd": null,
"IpcMode": "private",
"Cgroup": "",
"Links": null,
"OomScoreAdj": 0,
"PidMode": "",
"Privileged": false,
"PublishAllPorts": false,
"ReadonlyRootfs": false,
"SecurityOpt": null,
"UTSMode": "",
"UsernsMode": "",
"ShmSize": 67108864,
"Runtime": "runc",
"ConsoleSize": [
0,
0
],
"Isolation": "",
"CpuShares": 0,
"Memory": 0,
"NanoCpus": 0,
"CgroupParent": "",
"BlkioWeight": 0,
"BlkioWeightDevice": [],
"BlkioDeviceReadBps": null,
"BlkioDeviceWriteBps": null,
"BlkioDeviceReadIOps": null,
"BlkioDeviceWriteIOps": null,
"CpuPeriod": 0,
"CpuQuota": 0,
"CpuRealtimePeriod": 0,
"CpuRealtimeRuntime": 0,
"CpusetCpus": "",
"CpusetMems": "",
"Devices": [],
"DeviceCgroupRules": null,
"DeviceRequests": null,
"KernelMemory": 0,
"KernelMemoryTCP": 0,
"MemoryReservation": 0,
"MemorySwap": 0,
"MemorySwappiness": null,
"OomKillDisable": false,
"PidsLimit": null,
"Ulimits": null,
"CpuCount": 0,
"CpuPercent": 0,
"IOMaximumIOps": 0,
"IOMaximumBandwidth": 0,
"MaskedPaths": [
"/proc/asound",
"/proc/acpi",
"/proc/kcore",
"/proc/keys",
"/proc/latency_stats",
"/proc/timer_list",
"/proc/timer_stats",
"/proc/sched_debug",
"/proc/scsi",
"/sys/firmware"
],
"ReadonlyPaths": [
"/proc/bus",
"/proc/fs",
"/proc/irq",
"/proc/sys",
"/proc/sysrq-trigger"
]
},
"GraphDriver": {
"Data": {
"LowerDir": "/var/lib/docker/overlay2/8283ec51aadb12bb2833db9657734d64dd3f132073bc5299d2eb4f7d1ed99a36-init/diff:/var/lib/docker/overlay2/7711d01c217dc0e6e48097163cfbed122113fa2ee94b35f9e0af3334cde350e2/diff",
"MergedDir": "/var/lib/docker/overlay2/8283ec51aadb12bb2833db9657734d64dd3f132073bc5299d2eb4f7d1ed99a36/merged",
"UpperDir": "/var/lib/docker/overlay2/8283ec51aadb12bb2833db9657734d64dd3f132073bc5299d2eb4f7d1ed99a36/diff",
"WorkDir": "/var/lib/docker/overlay2/8283ec51aadb12bb2833db9657734d64dd3f132073bc5299d2eb4f7d1ed99a36/work"
},
"Name": "overlay2"
},
"Mounts": [],
"Config": {
"Hostname": "d209eedceec2",
"Domainname": "",
"User": "",
"AttachStdin": true,
"AttachStdout": true,
"AttachStderr": true,
"Tty": true,
"OpenStdin": true,
"StdinOnce": true,
"Env": [
"PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
],
"Cmd": [
"/bin/sh",
"-c",
"while true;do echo yushuo;sleep 1;done"
],
"Image": "centos",
"Volumes": null,
"WorkingDir": "",
"Entrypoint": null,
"OnBuild": null,
"Labels": {
"org.label-schema.build-date": "20200809",
"org.label-schema.license": "GPLv2",
"org.label-schema.name": "CentOS Base Image",
"org.label-schema.schema-version": "1.0",
"org.label-schema.vendor": "CentOS"
}
},
"NetworkSettings": {
"Bridge": "",
"SandboxID": "50f7730df4984bc750da43cced49ed17b7b6b7a7bf49fd2448a3ffac25b5d38d",
"HairpinMode": false,
"LinkLocalIPv6Address": "",
"LinkLocalIPv6PrefixLen": 0,
"Ports": {},
"SandboxKey": "/var/run/docker/netns/50f7730df498",
"SecondaryIPAddresses": null,
"SecondaryIPv6Addresses": null,
"EndpointID": "03cde5e54624ee1b838b6699a32050b97adc86eb771c50bbcd5c890cb2a826d1",
"Gateway": "172.17.0.1",
"GlobalIPv6Address": "",
"GlobalIPv6PrefixLen": 0,
"IPAddress": "172.17.0.3",
"IPPrefixLen": 16,
"IPv6Gateway": "",
"MacAddress": "02:42:ac:11:00:03",
"Networks": {
"bridge": {
"IPAMConfig": null,
"Links": null,
"Aliases": null,
"NetworkID": "db15aa787815809de73afa7b29a531e84d429455c1b9cb549ae74da3282ed6e3",
"EndpointID": "03cde5e54624ee1b838b6699a32050b97adc86eb771c50bbcd5c890cb2a826d1",
"Gateway": "172.17.0.1",
"IPAddress": "172.17.0.3",
"IPPrefixLen": 16,
"IPv6Gateway": "",
"GlobalIPv6Address": "",
"GlobalIPv6PrefixLen": 0,
"MacAddress": "02:42:ac:11:00:03",
"DriverOpts": null
}
}
}
}
]
进入当前正在进行的容器
代码语言:txt复制# 我们通常容器都是使用后台方式运行的,需要进入容器,修改一些配置
# 命令【方式1】
docker exec -it 容器id bashShell
# 测试
[root@VM_0_13_centos /]# docker ps
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
d209eedceec2 centos "/bin/sh -c 'while t…" 2 hours ago Up 2 hours
peaceful_shamir
[root@VM_0_13_centos /]# docker exec -it d209eedceec2 /
bin/bash
[root@d209eedceec2 /]# ls
bin home lost found opt run sys var
dev lib media proc sbin tmp
etc lib64 mnt root srv usr
[root@d209eedceec2 /]# ps -ef
UID PID PPID C STIME TTY TIME CMD
root 1 0 0 12:59 pts/0 00:00:01 /bin/sh
root 5603 0 0 14:32 pts/1 00:00:00 /bin/ba
root 5663 1 0 14:33 pts/0 00:00:00 /usr/bi
root 5664 5603 0 14:33 pts/1 00:00:00 ps -ef
# 命令【方式2】
docker attach 容器id
# 测试
[root@VM_0_13_centos /]# docker attach d209eedceec2
yushuo
yushuo
# 进入正在执行当前的代码
# docker exec # 进入容器后开启一个新的终端,可以在里面操作(常用)
# docker attach # 进入容器正在执行的终端,不会启动新的进程!
docker run、exec和attach使用和区别: https://blog.csdn.net/MePlusPlus/article/details/92822329 docker run;创建和启动一个新的容器实例,操作对象是镜像,选项较多,如果你要创建和启动一个容器,只能用run; docker exec: 在已运行的容器中,执行命令,操作对象是容器,如果你要进入已运行的容器,并且执行命令,用exec; docker attach: 同样操作的是已运行的容器,可以将本机标准输入(键盘输入)输到容器中,也可以将容器的输出显示在本机的屏幕上,如果你想查看容器运行过程中产生的标准输入输出,用attach;
从容器内拷贝文件到主机上
代码语言:txt复制docker cp 容器id:容器内的路径 目的地主机路径
# 进入docker容器内部
[root@VM_0_13_centos /]# docker run -it centos /bin/bash
[root@d0b9dbc42b33 /]# cd /home
[root@d0b9dbc42b33 home]# ll
bash: ll: command not found
[root@d0b9dbc42b33 home]# ls
# 在容器内新建一个文件
[root@d0b9dbc42b33 home]# touch test.java
[root@d0b9dbc42b33 home]# ls
test.java
[root@d0b9dbc42b33 home]# ls -l
total 0
-rw-r--r-- 1 root root 0 Sep 8 14:50 test.java
[root@d0b9dbc42b33 home]# exit
exit
[root@VM_0_13_centos /]# docker ps
CONTAINER ID IMAGE COMMAND CREATED STATUS
[root@VM_0_13_centos /]# docker ps -a
CONTAINER ID IMAGE COMMAND CREATED STATUS
d0b9dbc42b33 centos "/bin/bash" About a minute ago Exited (0) 9 seconds
# 将这文件拷贝出来到主机
[root@VM_0_13_centos /]# docker cp d0b9dbc42b33:/home/test.java /home
[root@VM_0_13_centos /]# cd /home
[root@VM_0_13_centos home]# ls
test.java
# 拷贝是一个手动过程,未来我们使用 -v 数据卷的技术,可以实现 自动同步 容器内/home 主机/home
小结
Child commands:https://docs.docker.com/engine/reference/commandline/docker/
Command | Description |
---|---|
docker attach | Attach local standard input, output, and error streams to a running container |
docker build | Build an image from a Dockerfile |
docker builder | Manage builds |
docker checkpoint | Manage checkpoints |
docker commit | Create a new image from a container’s changes |
docker config | Manage Docker configs |
docker container | Manage containers |
docker context | Manage contexts |
docker cp | Copy files/folders between a container and the local filesystem |
docker create | Create a new container |
docker diff | Inspect changes to files or directories on a container’s filesystem |
docker events | Get real time events from the server |
docker exec | Run a command in a running container |
docker export | Export a container’s filesystem as a tar archive |
docker history | Show the history of an image |
docker image | Manage images |
docker images | List images |
docker import | Import the contents from a tarball to create a filesystem image |
docker info | Display system-wide information |
docker inspect | Return low-level information on Docker objects |
docker kill | Kill one or more running containers |
docker load | Load an image from a tar archive or STDIN |
docker login | Log in to a Docker registry |
docker logout | Log out from a Docker registry |
docker logs | Fetch the logs of a container |
docker manifest | Manage Docker image manifests and manifest lists |
docker network | Manage networks |
docker node | Manage Swarm nodes |
docker pause | Pause all processes within one or more containers |
docker plugin | Manage plugins |
docker port | List port mappings or a specific mapping for the container |
docker ps | List containers |
docker pull | Pull an image or a repository from a registry |
docker push | Push an image or a repository to a registry |
docker rename | Rename a container |
docker restart | Restart one or more containers |
docker rm | Remove one or more containers |
docker rmi | Remove one or more images |
docker run | Run a command in a new container |
docker save | Save one or more images to a tar archive (streamed to STDOUT by default) |
docker search | Search the Docker Hub for images |
docker secret | Manage Docker secrets |
docker service | Manage services |
docker stack | Manage Docker stacks |
docker start | Start one or more stopped containers |
docker stats | Display a live stream of container(s) resource usage statistics |
docker stop | Stop one or more running containers |
docker swarm | Manage Swarm |
docker system | Manage Docker |
docker tag | Create a tag TARGET_IMAGE that refers to SOURCE_IMAGE |
docker top | Display the running processes of a container |
docker trust | Manage trust on Docker images |
docker unpause | Unpause all processes within one or more containers |
docker update | Update configuration of one or more containers |
docker version | Show the Docker version information |
docker volume | Manage volumes |
docker wait | Block until one or more containers stop, then print their exit codes |
docker的命令是十分多的,上面我们学习的那些都是最常用的容器和镜像的命令,之后我们还会学习很多命令!
Docker镜像讲解
commit镜像
代码语言:txt复制docker commit 提交容器成为一个新的副本
# 命令和git命令类似
docker commit -m="提交的描述信息" -a="作者" 容器id 目标镜像名:[TAG]
实战测试
代码语言:txt复制# 1、启动一个默认的tomcat
# 2、发现这个默认的tomcat 是没有webapps应用的,镜像的原因,官方的镜像默认是 webapps 下面是没有文件的!
# 3、我自己拷贝进去了基本的文件
# 4、将我们操作过的容器通过commit提交为一个镜像!我们以后就使用我们修改过的镜像即可,这就是我们自己的一个修改的镜像
学习方式说明:理解概念,但是一定要实践,最后实践和理论相结合一次搞定这个知识
代码语言:txt复制如果你想保存当前容器的状态,就可以通过commit来提交,获得一个镜像,
就好比我们以前学习vm时候,快照!
【扩展】关于可视化管理
- 以portainer为例
什么portainer?
Docker图形化界面管理工作!提供一个后台面板供我们操作!(先打开云服务器安全组)
代码语言:txt复制$ docker volume create portainer_data
$ docker run -d -p 8000:8000 -p 9000:9000 --name=portainer --restart=always -v /var/run/docker.sock:/var/run/docker.sock -v portainer_data:/data portainer/portainer-ce
访问测试:外网ip:8080 http://ip:9000/
通过它来访问:
这里目前选择管理本地
进入之后的面板:
点击local进入详细管理面板:
可视化面板我们平时不会经常使用,大家可以自己测试玩玩即可!
到了这里我们算是入门了Docker!
【后续待更新】
容器数据卷
DockerFile
Docker 网络
Docker Compose
Docker Swarm